Forum spam management?

The spam is driving me (and probably others) absolutely bonkers, we shouldn't be getting this much so i've done a little research on the matter and have been looking at the Xen Foro Spam management page and a few things have come to my attention:

1)
--
The StopForumSpam database can be checked. This is a collaborative databased used by thousands of forums to prevent known spammers from registering. The integration behavior is tunable based on the confidence of the database result. If you register and request a StopForumSpam API key, you can submit spam information back to StopForumSpam whenever you ban a spammer using the spam cleaner.
--
This would be extremely handy here. It doesn't look like it's in use as a few spam users have shown up and should block a lot of spam that shows up.

2) Perhaps you have a way of disallowing threads that have a html link in the title. That's 99% of the spam right there. This plugin looks interesting

3) One last thing, if a spammer has existed for some time we cannot run the spam cleaner on it. This is tricky as we're not able to remove these accounts, except for deleting the stuff manually. There's an option in the spam cleaner that allows for this but it seems to be disabled.

The volume of spam here does seem to be increasing (maybe 10 to 15 posts per day at the moment?), although most of it gets automatically routed via the modqueue, it seems like the system could be far more automated than it is.

Perhaps we could simply forbid first posts containing URLs? That would stop most of them.

This whole time the StopForumSpam wasn't enabled?
Geez that must've been hard work!
I had a spam problem on my own forum which also uses XenForo, and I've found these are the best settings as I haven't gotten spam since while still having legit accounts being registered.
Take a look if you need reference.

HOWEVER you gotta edit one of the spam checking PHP files and disable the part that checks their Usernames as well, because if someone was named something simple like "Bob", it will be picked up by the spam filter and have to be manually approved as there's probably millions of spammers that's used the name "Bob" before.

Perhaps we could simply forbid first posts containing URLs? That would stop most of them.

Click to expand...

There are a lot of genuine and legitimate user posts here that contain URLs though. Product suggestions for solving particular problems, links to articles, every post with a suggested keyboard layout, etc. No posts with a URL subject line would be OK though. Maybe rules that someone has to have X number of 'likes' prior to being allowed to post a message with a URL? That might quickly get more complex than it's worth.

Wally's idea of using and contributing to the StopForumSpam database is a good one.

There are a lot of genuine and legitimate user posts here that contain URLs though. Product suggestions for solving particular problems, links to articles, every post with a suggested keyboard layout, etc. No posts with a URL subject line would be OK though. Maybe rules that someone has to have X number of 'likes' prior to being allowed to post a message with a URL? That might quickly get more complex than it's worth.

Wally's idea of using and contributing to the StopForumSpam database is a good one.

Click to expand...

Yeah the StopForumSpam one is a must! I'm actually surprised it's not enabled as that would definitely cut down on the spam.
Also I don't mind the X number of likes idea, that might be trickier to implement though.

There are a lot of genuine and legitimate user posts here that contain URLs though. Product suggestions for solving particular problems, links to articles, every post with a suggested keyboard layout, etc.

Click to expand...

That's why I said "first posts" i.e. the first post made by a particular user. Anyone with a non-zero post count would be able to use URLs as freely as they do now.

The StopForumSpam-database IS used already. Besides the spam, you don't see the 30 users per day I need to manually reject or accept in that database...

I think the best idea is to disallow HTML links as first post and delete it right away automatically.
This can be mentioned during the registration, so any user who is able to read should be able to do a quick first "hello"-Post before posting an HTML link.

The StopForumSpam-database IS used already. Besides the spam, you don't see the 30 users per day I need to manually reject or accept in that database...

I think the best idea is to disallow HTML links as first post and delete it right away automatically.
This can be mentioned during the registration, so any user who is able to read should be able to do a quick first "hello"-Post before posting an HTML link.

1. The spam cleaner HARD deletes the threads now (so that us mods won't see all those already spam-cleaned threads anymore)
2. Instead of hiding the threads with all that spam crap, they're now deleted right away. This is based on keywords on the first thread. As far as I've seen it, the spam cleaner did a great job hiding these threads and there never was one that was legitimate... so it should work fine

1. The spam cleaner HARD deletes the threads now (so that us mods won't see all those already spam-cleaned threads anymore)
2. Instead of hiding the threads with all that spam crap, they're now deleted right away. This is based on keywords on the first thread. As far as I've seen it, the spam cleaner did a great job hiding these threads and there never was one that was legitimate... so it should work fine

Click to expand...

That's awesome! On my forum I made a "Post Hell" section where all the spam and useless posts get moved to, since I couldn't be bothered to figure out how to change the setting.